{"id":28126,"date":"2012-06-04T13:50:01","date_gmt":"2012-06-04T19:50:01","guid":{"rendered":"http:\/\/hill-kleerup.org\/blog\/2012\/06\/04\/bad-passwords.html"},"modified":"2012-06-04T13:50:01","modified_gmt":"2012-06-04T19:50:01","slug":"bad-passwords","status":"publish","type":"post","link":"https:\/\/hill-kleerup.org\/blog\/2012\/06\/04\/bad-passwords.html","title":{"rendered":"Bad passwords"},"content":{"rendered":"<p>Okay, everyone loves making fun of people who choose extraordinarily stupid \/ weak passwords. \u00a0But the answer is <i>not<\/i> to impose something like this, since, among other things, it promotes people writing their passwords down on a little slip of eminently stealable paper.<\/p>\n<p style='clear:both;'>\n<p style='margin-bottom:5px;'><strong>Embedded Link<\/strong><\/p>\n<div style='height:120px;width:120px;overflow:hidden;float:left;margin-top:0px;padding-top:0px;margin-right:10px;vertical-align:top;text-align:center;clear:both;'>\n\t\t\t\t\t\t\t\t\t\t\t\t\t<img style='max-width:none;' src='https:\/\/images0-focus-opensocial.googleusercontent.com\/gadgets\/proxy?container=focus&#038;gadget=a&#038;resize_h=100&#038;url=http%3A%2F%2Falso.kottke.org%2Fmisc%2Fimages%2Fpassword-req.gif' border='0' \/>\n\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n<p>\t\t\t\t\t\t\t\t\t\t\t\t<a href='http:\/\/kottke.org\/12\/06\/the-worlds-worst-password-requirements-list'>The world&#39;s worst password requirements list<\/a><br \/>\n\t\t\t\t\t\t\t\t\t\t\t\tI tweeted about this but wanted to document it here for posterity. The Attorney General of Texas Child Support website has the wor\n\t\t\t\t\t\t\t\t\t\t\t<\/p>\n<p style='clear:both;'><strong>Google+:<\/strong> Reshared <a href='https:\/\/plus.google.com\/101083456815352083930\/posts\/JFEY2WYFiqY' target='_new'>1<\/a> times<br \/> <strong>Google+:<\/strong> <a href='https:\/\/plus.google.com\/101083456815352083930\/posts\/JFEY2WYFiqY' target='_new'>View post on Google+<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"<p>Okay, everyone loves making fun of people who choose extraordinarily stupid \/ weak passwords. \u00a0But the answer is not to impose something like this, since, among other things, it promotes people writing their passwords down on a little slip of eminently stealable paper. Embedded Link The world&#39;s worst password requirements list I tweeted about this &hellip; <a href=\"https:\/\/hill-kleerup.org\/blog\/2012\/06\/04\/bad-passwords.html\" class=\"more-link\">Continue reading<span class=\"screen-reader-text\"> &#8220;Bad passwords&#8221;<\/span><\/a><\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_seopress_titles_title":"","_seopress_titles_desc":"","_seopress_robots_index":"","_seopress_robots_follow":"","_seopress_robots_imageindex":"","_seopress_robots_snippet":"","_seopress_robots_primary_cat":"","_seopress_robots_breadcrumbs":"","_seopress_robots_freeze_modified_date":"","_seopress_robots_custom_modified_date":"","_seopress_robots_canonical":"","_seopress_social_fb_title":"","_seopress_social_fb_desc":"","_seopress_social_fb_img":"","_seopress_social_fb_img_attachment_id":0,"_seopress_social_fb_img_width":0,"_seopress_social_fb_img_height":0,"_seopress_social_twitter_title":"","_seopress_social_twitter_desc":"","_seopress_social_twitter_img":"","_seopress_social_twitter_img_attachment_id":0,"_seopress_social_twitter_img_width":0,"_seopress_social_twitter_img_height":0,"_seopress_redirections_value":"","_seopress_redirections_enabled":"","_seopress_redirections_enabled_regex":"","_seopress_redirections_logged_status":"","_seopress_redirections_param":"","_seopress_redirections_type":0,"_seopress_analysis_target_kw":"","_jetpack_memberships_contains_paid_content":false,"footnotes":"","jetpack_publicize_message":"","jetpack_publicize_feature_enabled":true,"jetpack_social_post_already_shared":false,"jetpack_social_options":{"image_generator_settings":{"template":"highway","default_image_id":0,"font":"","enabled":false},"version":2}},"categories":[106],"tags":[],"class_list":["post-28126","post","type-post","status-publish","format-standard","hentry","category-plusposts"],"jetpack_publicize_connections":[],"jetpack_featured_media_url":"","jetpack_sharing_enabled":true,"jetpack-related-posts":[{"id":40330,"url":"https:\/\/hill-kleerup.org\/blog\/2014\/01\/07\/eek-google-knows-my-wifi-passwords-eek.html","url_meta":{"origin":28126,"position":0},"title":"Eek! Google knows my WiFi passwords! Eek!","author":"***Dave","date":"Tue 7-Jan-14 8:27am","format":false,"excerpt":"Or, perhaps, ho-hum. \u00a0Yes, if you have turned on \"back up my settings\" on your phone, then things like your WiFi passwords are being backed up, too. \u00a0Um ... yes, they are. And this is a shocking revelation?Same thing happens if you login to Chrome and have it back up\u2026","rel":"","context":"In &quot;~PlusPosts&quot;","block_context":{"text":"~PlusPosts","link":"https:\/\/hill-kleerup.org\/blog\/category\/blogging\/plusposts"},"img":{"alt_text":"","src":"","width":0,"height":0},"classes":[]},{"id":131268,"url":"https:\/\/hill-kleerup.org\/blog\/2016\/08\/13\/passwords-are-better-longer-not-more-complex-or-frequently-changed.html","url_meta":{"origin":28126,"position":1},"title":"Passwords are better longer, not more complex or frequently changed","author":"***Dave","date":"Sat 13-Aug-16 2:52pm","format":false,"excerpt":"And even the government is beginning to recognize that. Which is good news, even if longer passwords make for more opportunity for mistyping.The one thing I'll say about having 60 or 90 day expiries on passwords is that if a password is compromised, that compromise has a limited lifespan. But,\u2026","rel":"","context":"In &quot;~PlusPosts&quot;","block_context":{"text":"~PlusPosts","link":"https:\/\/hill-kleerup.org\/blog\/category\/blogging\/plusposts"},"img":{"alt_text":"","src":"","width":0,"height":0},"classes":[]},{"id":130405,"url":"https:\/\/hill-kleerup.org\/blog\/2016\/04\/11\/creating-a-digital-will-for-your-passwords-and-accounts.html","url_meta":{"origin":28126,"position":2},"title":"Creating a &quot;digital will&quot; for your passwords and accounts","author":"***Dave","date":"Mon 11-Apr-16 3:56pm","format":false,"excerpt":"Another good reminder and checklist for making sure your digital estate is in order. My wife and I share a LastPass account, but I certainly need to make provision for someone else to have access to it in case we both get hit by the same meteor.(LastPass obviously has some\u2026","rel":"","context":"In &quot;~PlusPosts&quot;","block_context":{"text":"~PlusPosts","link":"https:\/\/hill-kleerup.org\/blog\/category\/blogging\/plusposts"},"img":{"alt_text":"","src":"","width":0,"height":0},"classes":[]},{"id":44241,"url":"https:\/\/hill-kleerup.org\/blog\/2014\/08\/07\/on-those-billion-plus-stolen-passwords.html","url_meta":{"origin":28126,"position":3},"title":"On those billion-plus stolen passwords","author":"***Dave","date":"Thu 7-Aug-14 9:13am","format":false,"excerpt":"Bruce Schneier is more than skeptical, given that the information about the actual passwords is sparse, and the news was broken by a single company, which nobody's ever heard of, who's now charging a fee to have your security status monitored. \u00a0(The article and comments are both worth a read.)Yeah,\u2026","rel":"","context":"In &quot;~PlusPosts&quot;","block_context":{"text":"~PlusPosts","link":"https:\/\/hill-kleerup.org\/blog\/category\/blogging\/plusposts"},"img":{"alt_text":"","src":"","width":0,"height":0},"classes":[]},{"id":41215,"url":"https:\/\/hill-kleerup.org\/blog\/2014\/02\/26\/a-lot-of-tough-passwords-are-not-all-that-tough.html","url_meta":{"origin":28126,"position":4},"title":"A lot of tough passwords are not all that tough","author":"***Dave","date":"Wed 26-Feb-14 2:41pm","format":false,"excerpt":"Cracking programs aren't just using dictionary items, but common letter\/number substitutions, word combinations, and frequently used numeric suffixes and prefixes. And if the cracker has any info about you (esp. stuff from your hard drive), that's all grist for the cracking mill (so your birthday, anniversary date, kid's dates, zip\u2026","rel":"","context":"In &quot;~PlusPosts&quot;","block_context":{"text":"~PlusPosts","link":"https:\/\/hill-kleerup.org\/blog\/category\/blogging\/plusposts"},"img":{"alt_text":"","src":"","width":0,"height":0},"classes":[]},{"id":12067,"url":"https:\/\/hill-kleerup.org\/blog\/2007\/11\/26\/hash.html","url_meta":{"origin":28126,"position":5},"title":"Hash","author":"***Dave","date":"Mon 26-Nov-07 11:25am","format":false,"excerpt":"Oh, boy, you can use Google to decrypt MD5-encoded passwords. Um ... yippee? It only actually works on dictionary-entry passwords (which are big no-no's anyway)....","rel":"","context":"In &quot;Hi-Tech&quot;","block_context":{"text":"Hi-Tech","link":"https:\/\/hill-kleerup.org\/blog\/category\/hi-tech"},"img":{"alt_text":"","src":"","width":0,"height":0},"classes":[]}],"_links":{"self":[{"href":"https:\/\/hill-kleerup.org\/blog\/wp-json\/wp\/v2\/posts\/28126","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/hill-kleerup.org\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/hill-kleerup.org\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/hill-kleerup.org\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/hill-kleerup.org\/blog\/wp-json\/wp\/v2\/comments?post=28126"}],"version-history":[{"count":0,"href":"https:\/\/hill-kleerup.org\/blog\/wp-json\/wp\/v2\/posts\/28126\/revisions"}],"wp:attachment":[{"href":"https:\/\/hill-kleerup.org\/blog\/wp-json\/wp\/v2\/media?parent=28126"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/hill-kleerup.org\/blog\/wp-json\/wp\/v2\/categories?post=28126"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/hill-kleerup.org\/blog\/wp-json\/wp\/v2\/tags?post=28126"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}